Hey,

I was hoping someone could let me know if when you have a file upload script any checks need to be done on $_FILES, the reason i ask is because i think i heard somewhere that $_FILES is handled differently to $_POST or $_GET, if i was adding the file name to a database would i check that? and what else would need to be checked?

(I know size and extensions need to be checked).

Thanks,
Lee.

__________________

---

Have you checked out PHP: Handling file uploads - Manual ? It gives you the structure of $_FILES.

__________________
Jeremy Miller
Content Farmer - Optimized Automated Blog Posting

---

Yes i have looked at that, i was hoping you could maybe mention if there was any checks that needed to be done, such as stripslashes or something?

__________________

---

Well, except for the uploaded filename, everything else is created by PHP so you don't need sanitize that data.

__________________
Jeremy Miller
Content Farmer - Optimized Automated Blog Posting

---